Chinese Hackers Use AI Agents to Breach Thousands of Companies via ConnectWise
aiinsider ·
Microsoft has identified Chinese state-aligned hackers who utilized AI agents to breach the IT management provider ConnectWise. The attackers compromised the company's cloud backup service, stealing application credentials that allowed them to access corporate customers' Microsoft-hosted environments. By impersonating authorized users, the hackers gained entry to sensitive emails and files across thousands of organizations. The operation was characterized by its speed and scale, with AI agents executing nearly 3,000 sign-in attempts per minute. This rapid pace significantly reduced the window for defenders to detect and respond to the intrusion. The malicious activity was powered by ARTEX, an open-source AI framework designed for stress-testing cyber defenses. ConnectWise has paused access to its cloud backup system and is currently investigating the incident while working to restore services.
aiinsider